CVE-2007-2362 Memory corruption in n/a
Remote attackers can cause denial of service or execute arbitrary code via buffer overflows in MyDNS update handling.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-2362?
CVE-2007-2362 is a critical memory corruption vulnerability in n/a, published on 30 Apr 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c.
Which versions are affected by CVE-2007-2362?
It affects 1 product.
Products include Don Moore Mydns.
How do I fix CVE-2007-2362?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2007-2362 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-2362 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as DSA-1434-1, DTSA-36-1, GHSA-8c5w-487x-q6x4.